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Introduction 


The  Air  Force  often  uses  paper  to  document  expeditionary  medical  records  because  its  IT 
systems  are  not  properly  integrated.  To  solve  this,  the  Air  Force  Medical  Service  (AFMS)  and 
DoD  must  successfully  migrate  to  a  joint  cloud  based  electronic  health  record  (EHR)  system.  It 
must  be  centralized,  always  up,  and  easily  accessed  through  a  tablet  or  a  smartphone.  83%  of 
healthcare  organizations  are  using  cloud  based  applications  today. 1  The  AFMS  and  DoD 
healthcare  will  not  remain  a  high  reliability  organization  unless  cloud  migration  is  successful. 

A  successful  cloud  migration  will  enable  all  treatment  to  be  electronically  documented 
jointly  and  available  across  multiple  echelons  in  the  expeditionary  continuum  of  care. 
Additionally,  patient  safety  will  increase  in  austere  environments.  If  successful,  the  DoD  will 
deliver  the  world’s  first  globally  integrated  cloud  based  expeditionary  healthcare  system. 

Qualitative  and  quantitative  analysis  in  this  research  concludes  that  cloud  migrations  must 
properly  address  IT  security  and  cloud  privacy  concerns.  Therefore,  the  DoD  must  eliminate 
redundancies  in  its  lengthy  Requirements  Management  Framework  (RMF)  process  which 
governs  what  software  can  operate  on  its  networks.  The  DoD  must  also  reach  out  to  software 
vendors  to  help  them  integrate  security  standards  cheaply  during  product  design.  Success  here 
will  allow  the  use  of  innovative  application  development  platforms  such  as  Amazon  Cloud  as 
well  as  Commercial-Off-the-Shelf  (COTS)  software  and  telehealth  applications.  This  will  bring 
about  substantial  savings  to  the  DoD  IT  acquisitions  budget  over  the  long-term,  transform 
medical  IT  applications  from  a  weakness  to  a  strength,  and  improve  expeditionary  patient  care. 


1  Columbus,  L.  "83%  of  Healthcare  Organizations  are  Using  Cloud-Based  Apps  Today/'  Forbes,  2014. 
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Current  State  of  Air  Force  Expeditionary  Healthcare  Information  Technology 


Col  David  Johnson  (ACC/SGX)  explained  at  the  2013  Global  Medical  Readiness 
Symposium,  “Expeditionary  Medical  Support  (EMEDS)  is  a  rapidly  deployable,  tailored 
medical  response  supporting  the  full  range  of  medical  operations.  It  is  a  modular  buildup  and 
is  light,  lean,  and  life-saving.”2  It  is  about  providing  the  right  level  of  care  on  time  and  on 
target.  The  EMEDS  deployable  force  modules  are  the  EMEDS  Health  Response  Team  (HRT), 
EMEDS+10,  EMEDS+25,  and  the  Air  Force  Theater  Hospital  (AFTH).  All  four  have  different 
compositions,  populations  at  risk,  care  levels,  full  operating  capability  timelines,  and 
footprints.  The  first  three  EMEDS  deployable  force  modules  are  illustrated  in  Figure  1  on  the 
next  page.3  EMEDS  provides  flexibility  for  the  AFMS  to  execute  its  mission  in  any  area  of 
responsibility  (AOR).  Additionally,  lessons  learned  from  humanitarian  assistance  and  disaster 
relief  operations  have  decreased  EMEDS  setup  times  and  improved  initial  and  full  operational 
timelines.  An  EMEDS  unit  can  be  collectively  protected  meaning  medical  operations  can 
continue  after  certain  chemical,  biological,  radiological,  or  nuclear  (CBRN)  incidents.4 


2  Johnson,  David.  "Air  Combat  Command  Expeditionary  Medical  Operations"  (briefing,  Global  Medical  Readiness 
Symposium,  Joint  Base  Langley-Eustis,  VA,  11  September  2013). 

3  Ibid.,  15 

4  Orlando,  Lt  Col  Robert.  Healthcare  Information  Technology  (HIT)  in  an  Anti-Access  (A2)  and  Area  Denial  (AD) 
Environment.  March  2014. 
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EMEDS  HRT 


EMEDS+10 


Composition 

Population  at  Risk 
3X500-5£00^ 

Care  Level 
Role  2 

FOC  Timeline 

_ 36  hours _ 

I  ootprint 
8  tents,  26.000  sq  It 


EMEDS+25 


Composition 

Population  at  Risk 
^^T000-(x500  ^ 

Care  Level 
Role  3 

FOC  Timeline 
60  hours 
Footprint 

1 1  tents,  40,000  sq  tt 


Figure  1:  EMEDS  Deployable  Force  Modules 

EMEDS  ET  requirements  are  determined  by  ACC/SG,  ACC/A6,  Theater  Medical 
Information  Program  (TMIP)  Program  Management  Office,  and  the  Integrated  Logistics  Support 
Manager  (AFMOA/SGALW).  All  equipment  must  be  compliant  with  deployed  force 
information  system  naming  conventions  and  information  assurance  requirements.5  EMEDS  does 
not  deploy  with  data  infrastructure  and  relies  upon  expeditionary  combat  support  and  base 
operating  support  due  to  its  limited  organic  support  capability.  EMEDS  relies  on  the  host 
base’s  communication  unit  for  support  and  its  data  communication  infrastructure.  Additionally, 
EMEDS  facilities  rely  upon  network  control  centers  for  basic  core  network  functions  such  as 
network  administration,  management,  and  information  assurance.  Figure  2  displays  a  notional 
EMEDS  network  configuration  per  the  Air  Force  Tactics,  Techniques,  and  Procedures  3-42.71 6 
where  the  red  arrow  connects  the  laptop  server  to  the  base  communication  unit.7 


5  Air  Force  Tactics,  Techniques,  and  Procedures  3-42.71,  Expeditionary  Medical  Support  (EMEDS)  and  Air  Force 
Theater  Hospital  (AFTH),  January  2014. 

6  Ibid.,  36 

7  Orlando,  Lt  Col  Robert.  Healthcare  Information  Technology  (HIT)  in  an  Anti-Access  (A2)  and  Area  Denial  (AD) 
Environment.  March  2014. 
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Figure  2:  EMEDS  HRT  Network  Configuration 


A  strength  of  EMEDS  is  its  network  configuration  that  can  be  easily  scaled-up  as  the 
AFMS  uses  the  modular  buildup  from  an  EMEDS  HRT  to  EMEDS+25  capability.8  The 


8  Orlando,  Lt  Col  Robert.  Healthcare  Information  Technology  (HIT)  in  an  Anti-Access  (A2)  and  Area  Denial  (AD) 
Environment.  March  2014. 
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network  configuration  expands  as  the  AFMS  transitions  from  an  EMEDS  HRT  to  a  larger 


EMEDS  by  adding  more  laptops  and  printers  to  emergency  medicine,  medical  ward,  dental 
clinic,  critical  care,  primary  care,  and  preventive  medicine.  An  EMEDS+10  and  EMEDS+25 
have  a  server  suite  compared  to  a  laptop  server  in  an  EMEDS  HRT  configuration.  The  ability 
to  expand  the  network  provides  flexibility  as  the  mission  requirements  change.  However, 
EMEDS  has  a  limited  organic  capability  and  relies  on  base  operating  support  for  data 
infrastructure  and  a  connection  to  the  Internet.  The  medical  systems  UTC  (FFSYS)  consists  of 
one  Medical  Service  Corps  (MSC)  officer  and  two  health  service  managers  (4A).  The  three 
personnel  are  part  of  the  58-bed  AFTH.  Prior  to  the  AFTH  buildup,  the  MSC  or  4A  with  the 
most  systems  expertise  will  be  tasked  to  act  as  the  facilitator  between  EMEDS  and  base  support 
and  execute  the  necessary  actions  so  the  EMEDS  network  functions  properly.9 

A  weakness  of  EMEDS  computer  and  radio  IT  equipment  is  they  run  off  a  local  area 
network  under  a  client/server  topology  making  medical  data  sharing  across  the  DoD  continuum 
of  care  very  challenging.  Consequently,  as  patients  are  moved  out  of  the  AOR  to  medical 
treatment  facilities  (MTF),  paper  medical  records  are  almost  always  used  as  the  chief  medical 
information  sharing  mechanism.  This  is  far  from  ideal  as  paper  records  can  be  lost  in  transit 
creating  significant  patient  safety  issue  as  well  as  the  need  for  re-diagnosis. 

Cloud  Computing:  A  New  Paradigm 

Cloud  computing  is  ideal  for  healthcare  delivery  through  an  EHR  especially  for  a  global 
organization  like  the  Air  Force  that  often  operates  in  austere  anti-access  (A2)  and  area  denial 
(AD)  environments  in  foreign  countries.  Cloud  computing  is  a  type  of  internet-based 
computing  platform  that  provides  shared  computer  processing  resources  and  data  to  computers 


9  Orlando,  Lt  Col  Robert.  Healthcare  Information  Technology  (HIT)  in  an  Anti-Access  (A2)  and  Area  Denial  (AD) 
Environment.  March  2014. 
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and  other  devices  on  demand  (Hassan,  2011). 10  It  is  a  model  for  enabling  ubiquitous,  on- 
demand  access  to  a  shared  pool  of  configurable  computing  resources  (e.g.,  computer  networks, 
servers,  storage,  applications  and  services),  which  can  be  rapidly  provisioned  and  released  with 
minimal  management  effort  (Mell,  2011). 11  Cloud  computing  is  the  provision,  utilization,  and 
management  of  internet-hosted  software  applications,  data  storage,  and  computing  services  for 
their  computing  needs  rather  than  applications  on  their  local  computers  (Park  and  Ryoo, 

2012). 12  Cloud  computing  is  most  certainly  a  new  paradigm  for  accessing  networked  resources 
irrespective  of  location  via  the  internet  (Cegielski  et  al.,  2012 13,  Park  and  Ryoo,  2012 14, 
Behrend  et  al.,  201 1 15). 

During  the  past  10  years,  internet  bandwidth  has  increased  considerably.  People  interact 
not  only  with  personal  computers,  but  through  tablets  and  smartphones.  Even  though  it  is  faster 
to  store  and  access  a  file  or  an  application  on  a  personal  device  or  a  local  network,  in  some 
cases  it  is  practical  to  do  the  same  via  a  file  or  application  server  at  a  location  far  away.  As  the 
bandwidth  constraints  of  storing  files  and  accessing  applications  through  external  sources 
connected  to  the  internet  have  diminished,  many  individuals  and  companies  have  begun 
eschewing  the  use  of  their  PC  and  local  area  networks.  The  use  of  the  cloud  to  access 
information,  utilize  applications,  and  interact  online  has  increased.  Most  instances  of  cloud 
computing  today  are  though  web  browsers  (i.e.  Chrome,  Explorer,  Safari,  etc.)  or  through 


10  Hassan,  Qusay.  "Demystifying  Cloud  Computing,"  The  Journal  of  Defense  Software  Engineering.  CrossTalk.  2011 
(Jan/Feb):  16-21. 

11  Mell,  Peter;  Grance,  Timothy.  The  NIST  Definition  of  Cloud  Computing  (Technical  report).  National  Institute  of 
Standards  and  Technology:  U.S.  Department  of  Commerce.  doi:10.6028/NIST.SP. 800-145.  Special  publication  800- 
145,  2011. 

12  Park,  S.,  Ryoo,  S.  "An  Empirical  Investigation  of  End-Users'  Switching  Toward  Cloud  Computing:  a  Two  Factor 
Theory  Perspective,"  Computers  in  Human  Behavior  29(1):160-170,  2012. 

13  Cegielski,  C.,  Jones-Farmer,  L.,  Wu,  Y.,  &  Hazen,  B.  "Adoption  of  Cloud  Computing  Technologies  in  Supply  Chains: 
an  Organizational  Information  Processing  Theory  Approach,"  International  Journal  of  Logistics  Management,  Vol. 
23(2),  2012. 

14  Ibid. 

15  Behrend,  T.S.,  Wiebe,  E.N.,  London,  J.E.,  &  Johnson,  E.C.  "Cloud  Computing  Adoption  and  Usage  in  Community 
Colleges,"  Behaviour  and  Information  Technology,  Vol.  30(2),  231-240,  2011. 
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quickly  downloadable  applications  that  can  be  utilized  easily  not  only  from  a  tablet  or  PC,  but 
through  a  smartphone  as  well. 

Cloud  computing  offers  three  distinct  advantages  over  traditional  pc/network  server 
computing:  free-flow  of  information16,  flexibility  of  IT  infrastructure17,  and  better  system 
quality18  in  terms  of  better  accessibility  of  pertinent  information.  In  essence  cloud  systems  are 
better  and  cheaper  than  client  server  networks.  Cloud  systems  are  easily  upgraded,  enable 
productivity  anywhere,  provide  off-site  data  storage,  do  not  require  on-site  IT  maintenance,  are 
ideal  for  information  recovery  during  disasters,  have  a  high  reliability  rate,  and  cost  less  to  own 
as  shown  in  figure  3. 


16  Atuahene-Gima,  Kwaku.  "The  Effects  of  Centrifugal  and  Centripetal  Forces  on  Product  Development  Speed  and 
Quality:  How  Does  Problem  Solving  Matter,"  Academy  of  Management  Journal,  46,  359-373,  2003. 

17  Ray,  Gautam,  Waleed  A.  Muhanna,  and  Jay  B.  Barney,  "Information  Technology  and  the  Performance  of  the 
Customer  Service  Process:  A  Resource-based  Analysis",  MIS  Quarterly,  29,  625-652,  2005. 

18  Wixom,  Barbara,  and  Todd,  Peter.  "A  Theoretical  Integration  of  User  Satisfaction  and  Technology  Acceptance," 
Information  Systems  Research,  16,  85-102,  2005. 
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Figure  3:  Cloud  Computing  Benefits 


The  cloud’s  free-flow  of  information19  takes  place  at  an  increasingly  rapid  and  intuitive 
manner  between  people  online  thanks  to  the  advent  of  sophisticated  algorithms.  Intelligent 
application  design  leveraging  smart  algorithmic  functions  through  the  cloud  have  transformed 
the  internet  into  an  intelligent  personal  assistant  in  many  areas  of  life.  Some  algorithms  not 
only  help  you  find  or  accomplish  what  you  need  know,  but  predict  your  information  needs  and 
suggest  solutions  accordingly.  During  the  past  ten  years  companies  like  Google,  Amazon,  and 
Facebook  have  embedded  algorithmic  design  into  their  computer  applications  enabling  a  more 
customized  and  intuitive  web  experience.  Google  has  become  the  leading  search  engine  in  the 
world  due  to  its  ability  to  track  web  activity,  build  customized  profiles,  and  deliver  customized 
information  through  push  and  pull  mechanisms.  Facebook  is  the  leading  social  media  company 
and  utilizes  algorithms  to  suggest  friends  and  determine  the  type  of  content  that  is  most 
pertinent  to  its  users. 

The  cloud’s  flexibility  of  infrastructure20  denotes  how  easy  it  is  for  a  person  or 
organization  to  integrate  the  information  residing  on  personal  computers  with  the  greater  cloud 
infrastructure.  Years  ago,  integrating  information  between  different  systems  required  a 
customized  networking  integration,  software  integration/redesign,  or  at  the  very  least  data 
export/imports  from  one  system  to  another.  Cloud  applications  do  not  have  significant 
integration  challenges  impeding  the  free-flow  of  information.  They  are  designed  to  run  off  the 
web  browser  platforms  which  are  already  designed  to  work  with  over  95%  of  personal 
computers,  tablets,  and  smartphones.  Additionally,  users  can  download  and  install  applications 


19  Atuahene-Gima,  Kwaku.  "The  Effects  of  Centrifugal  and  Centripetal  Forces  on  Product  Development  Speed  and 
Quality:  How  Does  Problem  Solving  Matter,"  Academy  of  Management  Journal,  46,  359-373,  2003. 

20  Ray,  Gautam,  Waleed  A.  Muhanna,  and  Jay  B.  Barney,  "Information  Technology  and  the  Performance  of  the 
Customer  Service  Process:  A  Resource-based  Analysis",  MIS  Quarterly,  29,  625-652,  2005. 
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running  on  Apple,  Google,  or  Microsoft  platforms  that  will  constantly  update  themselves  24 
hours  a  day.  Ultimately,  all  this  leads  to  much  higher  system  quality21  satisfying  an  ever 
growing  number  of  user  needs. 

Why  Migrating  to  the  Cloud  is  Essential  for  High  Reliability  Organizations  (HRO) 

As  the  AFMS  recently  transitioned  to  the  HRO  model,  successfully  migrating  to  cloud 
computing  is  as  important  as  ever.  As  an  HRO,  successful  cloud  migration  will  lead  to 
organizational  success  as  IT  will  deliver  an  organizational  competitive  advantage  through  the 
secure  integrated  global  sharing  of  medical  information  cheaply. 


The  Medical  Group  Management  Association,  which  also  functions  as 
a  Baldridge  Excellence  Performance  Board  Examiner,  states  that  there 
is  a  big  problem  in  the  healthcare  industry  with  siloed  and  fragmented 
data  spread  across  many  EHR  systems  that  do  not  integrate  well 
together.  With  the  goal  of  becoming  a  HRO,  healthcare  organizations 
should  be  motivated  to  improve  patient  care  and  control  costs  by 
investing  in  a  cloud-based  analytics  platform  to  integrate  data  from  all 
EHRs  within  existing  information  technology  infrastructure. 
Embracing  HRO  Promotes  Performance  Excellence  in  the  healthcare 
delivery  (MGMA,  2017). 22 


Gartner,  Inc.,  the  world's  leading  information  technology  research  and  advisory 
company,  says  that  more  than  $1  trillion  in  IT  spending  will  be  directly  or  indirectly  affected 
by  the  shift  to  the  cloud  during  the  next  five  years.23  This  will  make  cloud  computing  one  of 
the  most  disruptive  forces  of  IT  spending  since  the  early  days  of  the  digital  age.  As  the  cloud 
computing  phenomenon  continues  to  grow,  a  new  understanding  measuring  the  relationship 


21  Wixom,  Barbara,  and  Todd,  Peter.  "A  Theoretical  Integration  of  User  Satisfaction  and  Technology  Acceptance," 
Information  Systems  Research,  16,  85-102,  2005. 

22  Medical  Group  Management  Association.  "High  Reliability  Organization  in  the  Healthcare  Industry:  a  Model  for 
Excellence,  Innovation,  and  Sustainability,"  2017,  http://www.mgma.com/practice-resources/articles/fellow- 
papers/2016/high-reliability-organization-in-the-healthcare-industry-a-model-for-excellence-innovation-and-sus 
(accessed  13  April  2017). 

23  Woods,  Viveca.  "Worldwide  Public  Cloud  Services  Market  is  Forecast  to  Reach  $204  billion  in  2016,"  Gartner,  2016, 
http://www.gartner.com/newsroom/id/3188817/  (accessed  3  November  2016). 
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between  the  variables  that  drive  the  adoption  of  cloud  computing  against  those  that  hamper  it  is 
needed. 

The  Air  Force  needs  to  understand  the  factors  affecting  successful  implementation  of 
cloud  computing  to  have  a  better  sense  on  how  to  calibrate  their  migration  to  the  cloud  without 
taking  unnecessary  security24  and  privacy25  risks.  Despite  the  high  number  of  approved  cloud 
projects,  companies  have  a  hard  time  completing  them  because  of  security  and  privacy 
concerns.  Not  properly  assessing  the  right  balance  of  privacy  and  security  settings  will  foster 
cloud  migration  failure  and  the  continued  reliance  on  costly  upkeep  of  expensive  and  obsolete 
legacy  IT  infrastructure.  Throughout  the  US  private- sector  healthcare  system,  there  are 
numerous  examples  of  successful  healthcare  delivery  through  cloud  based  systems. 

Cloud  Computing  Success  in  Private- Sector  Healthcare 

US  private-sector  healthcare  is  a  large  and  growing  industry  that  is  experiencing  a  major 
transformation  in  its  information  technology  base  through  the  increased  use  of  cloud  based 
health  informatics.  Information  systems  confronted  similar  transformations  in  other  industries 
and  developed  theories  and  methods  that  proved  useful  in  healthcare  applications.  In  turn, 
information  systems  may  benefit  from  incorporating  knowledge  from  health  informatics,  a 
discipline  that  studies  IT  within  medical  services  delivery,  management  and  planning  contexts 
(Wilson  2004,  p.  332).26 

A  successful  migration  to  the  cloud  is  essential  for  a  healthcare  HRO  because  of  the  shift 
towards  health  informatics.  The  Health  Insurance  Portability  and  Accountability  Act  of  1996 
(HIPAA),  similar  laws,  and  regulations  are  motivating  the  development  of  standardized 

24  Rai,  Arun,  Paul  Brown,  and  Xinlin  Tang.  "Organizational  Assimilation  of  Electronic  Procurement  Innovations," 
Journal  of  Management  Information  Systems,  26,  257-296,  2009. 

25  Son,  Jai-Yeol,  and  Sung  S.  Kim.  "Internet  Users'  Information  Privacy-Protective  Responses:  A  Taxonomy  and  a 
Nomological  Model",  MIS  Quarterly,  32,  503-529,  2008. 

26  Wilson,  E.  &  Lankton,  N.  "Interdisciplinary  Research  and  Publication  Opportunities  in  Information  Systems  and 
Healthcare,"  Communications  of  the  Association  for  Information  Systems,  14,  332,  2004. 
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healthcare  systems  with  an  increase  of  attention  towards  private  and  secure  data.  Financial 
motivations,  organizational  acquisitions,  and  mergers  are  prompting  healthcare  administrators 
to  implement  large-scale  IT  integration  projects  (Wilson  2004,  p.  332). 27 


The  use  of  cloud  based  application  are  pervasive  in  private-sector 
medical  organization.  83%  of  healthcare  organizations  are  using  cloud 
based  apps  today  whereas  92%  of  healthcare  providers  now  and  in  the 
future  see  the  value  of  cloud  services  for  their  organizations.  43% 
currently  use  the  cloud  to  host  clinical  applications  and  data.  37%  of  IT 
healthcare  organizations  chose  to  deploy  their  cloud  applications  on  a 
private  cloud  architecture.  36.3%  choose  a  hybrid  cloud  model  and 
23.4%  chose  public  clouds  (Columbus,  2014).  28 


New  technologies  are  forging  ways  to  enhance  value  and  lower  telehealth  operations 
costs  also.  For  example,  ImageZone  is  a  cloud-based  medical  image  sharing  platform  designed 
to  provide  a  digital  alternative  to  the  traditional  methods  of  sharing  radiology  images  on  hard 
copy  films  and  CDs.  The  platform  allows  healthcare  providers  to  securely  access  and  share 
patient  medical  images,  such  as  X-rays,  mammograms,  MRIs,  ultrasounds  and  CT  scans,  in 
real  time.  Relieved  of  the  burden  of  managing  hardware,  storage,  and  maintenance,  IT 
departments  that  use  cloud  computing  are  able  to  focus  solely  on  applications  and  servicing 
their  end-users.  Therefore,  IT  staffing  burdens  are  reduced  and  certain  IT  staff  can  be 
reallocated  to  other  areas. 

If  the  EHR  is  cloud-based,  it  can  be  accessed  from  a  computer  at  other  geographic 
locations.  For  example,  in  the  midst  of  catastrophic  events,  many  healthcare  providers  are  able 
to  continue  vital  patient  care  and  keep  essential  communication  using  the  EHR  cloud. 
Surprisingly,  during  a  hurricane,  physicians  could  still  use  the  EHR  cloud  for  billing, 
transmitting  prescriptions,  checking  patient  medication  lists,  and  consulting  with  the  patient 


27  Ibid. 

28  Columbus,  L.  "83%  of  Healthcare  Organizations  are  Using  Cloud-Based  Apps  Today,"  Forbes,  2014. 
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about  all  their  medical  conditions.  The  experience  of  New  York  University  Langone  Medical 
Center,  which  had  to  evacuate  300  patients  during  the  height  of  Hurricane  Sandy  due  to  power 
outages,  shed  light  on  the  lifesaving  benefits  of  the  EHR  cloud.  The  cloud  EHR  is  not  only  a 
lifesaving  tool  during  a  disastrous  storm;  it  can  also  enhance  a  physician’s  ability  to  care  for 
patients  as  a  vital  long-term  tool  (Wang,  2014). 29  The  shift  of  information  technology  activity 
to  the  cloud  has  caused  a  dramatic  change  to  organizational  processes  around  the  globe.  The 
Air  Force  must  utilize  this  innovative  technology. 

Cloud  Computing  Benefits  for  Expeditionary  Medical  Care 

There  is  an  incredible  opportunity  for  the  DoD  to  provide  quick,  integrated,  and  safe 
patient  care  for  its  expeditionary  service  members  by  creating  the  world’s  first  large-scale 
globally  integrated  cloud  based  expeditionary  healthcare  system  depicted  in  figure  4  on  the 
next  page.30  Due  to  its  reliance  on  a  traditional  client  server  functional  model,  currently  the  Air 
Force  is  very  rudimentary  in  leveraging  network  technology  in  a  deployed  setting.  Although 
there  is  some  IT  at  deployed  locations  it  is  not  properly  integrated  with  the  rest  of  its  service  let 
alone  the  full  spectrum  of  DoD  healthcare31. 

Medics  require  access  to  the  full  scope  of  network  medical  applications  throughout  the 
continuum  of  care  with  a  laptop,  tablet,  or  handheld  device  anywhere  in  the  world  to  include 
austere  locations.  This  would  allow  combat  medics  who  come  into  contact  with  a  patient  to 
retrieve  their  EHR  via  DoD  ID  or  social  security  number  and  update  it  accordingly  prior  to 
referring  them  to  the  next  appropriate  echelon  of  care  across  the  DoD.  The  only  way  this  is 
possible  is  through  the  use  of  an  ubiquitous,  always  up,  and  EHR  medical  cloud  system  rather 
than  the  traditional  network  client/server  systems  we  currently  use. 


29  Wang,  L,  Alexander,  S.  "Medical  Applications  and  Healthcare  Based  on  Cloud  Computing,"  International  Journal  of 
Cloud  Computing  and  Services  Science,  Vol.2,No.4,  August  2014. 

30  Orlando,  Lt  Col  Robert.  Operational  Medicine  IT  Update  Meeting.  29  March  2017. 

31  Ibid. 
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Figure  4:  World's  First  Large-Scale  Globally  Integrated  Cloud  Based  Expeditionary  Healthcare  System 


Cloud  Computing  Migration  Literature  Review 

What  are  some  of  the  impediments  impacting  the  Air  Force’s  slow  migration  to  the 
cloud?  Are  there  theories  and  models  from  Academia  that  can  be  utilized  to  measure  factors 
affecting  Air  Force  cloud  migration  success?  To  answer  these  questions  a  scholarly  literature 
review  of  cloud  computing  adoption  is  required. 

There  has  been  a  plethora  of  research  concerning  cloud  computing  adoption  but  so  far 
there  has  been  no  attempt  to  update  Delone  &  McLean’s  information  systems  success  theory  to 
reflect  the  great  changes  brought  about  by  cloud  computing32.  Alhammadi  et  al.,  (2015) 


32  DeLone,  W.  &  McLean,  E.  "The  DeLone  and  McLean  Model  of  Information  Systems  Success:  A  Ten-Year  Update," 
Journal  of  Management  Information  Systems,  19(4),  9-30,  2003. 

17 


researched  factors  that  influence  cloud  computing  adoption  using  Diffusion  of  Innovations 
(DOI)  and  the  Technology-Organization-Environment  (TOE)  theories.  Security  had  a 
statistically  significant  relationship  with  cloud  adoption33.  Top  management  support, 
organizational  readiness,  and  enterprise  status  significantly  influenced  cloud  computing 
adoption.  Oliveira  et  al.,  (2014)34  used  a  Diffusion  of  Innovations  (DOI)  and  Technology- 
Organization-Environment  (TOE)  theories  to  measure  innovation  characteristics  effects  on  the 
adoption  of  cloud  computing.  They  surveyed  executives  from  369  Portuguese  firms  in  the 
manufacturing  and  service  industries.  Their  quantitative  findings  suggest  that  complexity, 
technological  readiness,  top  management  support,  and  firm  size  influence  a  firm’s  adoption  of 
cloud  computing.  Bhattacherjee  and  Park  (2013)35  researched  the  behavioral  intentions  in 
switching  to  cloud  computing  in  their  application  of  migration  theory.  They  found  that 
intention  to  migrate  to  the  cloud  had  a  positive  effect  (standardized  13=0.578;  PcO.OOO)  on 
cloud  migration.  Hsu  et  al.,  (2014)  utilized  Technology-Organization-Environment  (TOE) 
theory  when  examining  cloud  computing  implementation36.  They  surveyed  200  Taiwanese 
firms  consisting  of  Taiwan’s  information  and  communications  technology  (ICT) 
manufacturing,  ICT  service,  general  service,  and  general  manufacturing  industries.  They 
found  that  perceived  benefits  and  IT  capability  are  positively  related  to  cloud  computing 
adoption  while  business  concern  is  negatively  related.  Obeidat  and  Turgay,  (2013)  formulated 
and  validated  the  Technology  Trade  Theory  (Triple  T)  in  their  analysis  of  factors  affecting 
cloud  adoption  initiatives37.  They  incorporated  Social  Exchange  Theory  into  the  Technology 


33  Alhammadi,  A.,  Stanier,  C.,  &  Eardley,  A.  "The  Determinants  of  Cloud  Computing  Adoption  in  Saudi  Arabia," 
Computer  Science  and  Information  Technology-CSCP  2015. 

34  Oliveira,  T.,  Thomas,  M.,  &  Espadanal,  M.  "Assessing  the  Determinants  of  Cloud  Computing  Adoption:  an  Analysis 
of  the  Manufacturing  and  Services  Sectors,"  Information  and  Management,  Vol.  51,  497-510,  2014. 

35  Bhattacherjee,  A.  &  Park,  S.  "Why  End-Users  Move  to  the  Cloud:  a  Migration-Theoretic  Analysis,"  European  Journal 
of  Information  Systems,  2013. 

36  Hsu,  P.,  Ray,  S.,  &  Li-Hsieh,  Y.  "Examining  Cloud  Computing  Adoption  Intention,  Pricing  mechanism  and 
deployment  model,"  International  Journal  of  Management,  Vol.  34,  2014. 

37  Obeidat,  M.  &  Turgay,  T.  "Empirical  Analysis  for  the  Factors  Affecting  the  Adoption  of  Cloud  Computing  Initiatives 
by  Information  Technology  Executives,"  Journal  of  Management  Research,  Vol.  5(1),  2013. 
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Acceptance  Model.  They  found  a  positive  relationship  between  the  advantages  of  cloud 
computing  and  behavioral  intentions.  Cegielski  et  al.  (2012)  used  Organizational  Information 
Processing  Theory  to  measure  how  information  processing  requirements  and  capabilities  affect 
the  intention  to  implement  supply  chain  cloud  computing  technology38.  Low  et  al.,  (201 1) 
used  the  Technology-Organizational-Environment  (TOE)  Framework  to  investigate  factors  that 
affected  the  implementation  of  cloud  computing  by  high-tech  firms39.  Park  and  Ryoo  (2012) 
used  the  Two-Factor  Theory  of  Technology  Usage  to  investigate  factors  which  moderated  end- 
user  adoption  of  cloud  services40.  They  found  that  switching  benefits  had  a  significantly 
positive  effect  on  intention  to  switch  (standardized  B=0.179;  P<0.01)  and  switching  costs  had  a 
significantly  negative  effect  on  intention  to  switch  (standardized  B=-0.128;  PcO.Ol).  Finally, 
Behrend  et  al.  (2011)  utilized  the  Technology  Acceptance  Model  (TAM)  in  their  investigation 
of  factors  leading  to  successful  adoption  of  cloud  computing  in  a  community  college  setting41. 
The  Unified  Theory  of  Acceptance  and  Use  of  Technology  (UTUAT)  measures  the  financial, 
usability,  and  psychological  factors  that  influence  the  propensity  to  use  a  system.42 

In  conclusion,  Information  Systems  Success  theory  is  one  of  the  most  widely  cited 
models  to  measure  systems  adoption  and  should  include  cloud  computing.  It  can  be  adapted  to 
measure  the  positive  factors  that  influence  people  to  use  the  cloud  (free  flow  of  information43, 


38  Cegielski,  C.,  Jones-Farmer,  L.,  Wu,  Y.,  &  Hazen,  B.  "Adoption  of  Cloud  Computing  Technologies  in  Supply  Chains: 
an  Organizational  Information  Processing  Theory  Approach,"  International  Journal  of  Logistics  Management,  Vol. 
23(2),  2012. 

39  Low,  C.,  Chen,  Y.,  &  Wu,  M.  "Understanding  the  Determinants  of  Cloud  Computing  Adoption,"  Industrial 
Management  and  Data  Systems,  Vol.  111(7),  1006-1023,  2011. 

40  Park,  S.,  Ryoo,  S.  "An  Empirical  Investigation  of  End-Users'  Switching  Toward  Cloud  Computing:  a  Two  Factor 
Theory  Perspective,"  Computers  in  Fluman  Behavior  29(1):160-170,  2012. 

41  Behrend,  T.S.,  Wiebe,  E.N.,  London,  J.E.,  &  Johnson,  E.C.  "Cloud  Computing  Adoption  and  Usage  in  Community 
Colleges,"  Behaviour  and  Information  Technology,  Vol.  30(2),  231-240,  2011. 

42  Venkatesh,  V.  &  Davis,  F.  "A  Theoretical  Extension  of  the  Technology  Acceptance  Model:  Four  Longitudinal  Field 
Studies,"  Management  Science  (46:2),  February  2000. 

43  Atuahene-Gima,  Kwaku.  "The  Effects  of  Centrifugal  and  Centripetal  Forces  on  Product  Development  Speed  and 
Quality:  Flow  Does  Problem  Solving  Matter,"  Academy  of  Management  Journal,  46,  359-373,  2003. 
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flexibility  of  IT  infrastructure44,  and  system  quality45)  as  well  as  the  negative  factors  that 
constrain  the  use  of  the  cloud  (i.e.  security46  and  privacy  concerns47). 

Privacy/Security  Risks  of  Cloud  Computing 

A  quantitative  study  based  on  the  preceding  literature  review  found  that  cloud  privacy 
concerns48  and  IT  security  concerns49  are  significant  challenges  negatively  affecting  an 
organization’s  intention  to  use  the  cloud  and  overall  satisfaction  with  cloud  based  systems.  A  new 
conceptual  cloud  adoption  model  depicted  in  figure  5  was  created. 
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Figure  5:  Conceptual  Research  Model  with  Quantitative  Analysis 


44  Ray,  Gautam,  Waleed  A.  Muhanna,  and  Jay  B.  Barney,  "Information  Technology  and  the  Performance  of  the 
Customer  Service  Process:  A  Resource-based  Analysis",  MIS  Quarterly,  29,  625-652,  2005. 

45  Wixom,  Barbara,  and  Todd,  Peter.  "A  Theoretical  Integration  of  User  Satisfaction  and  Technology  Acceptance," 
Information  Systems  Research,  16,  85-102,  2005. 

46  Rai,  Arun,  Paul  Brown,  and  Xinlin  Tang.  "Organizational  Assimilation  of  Electronic  Procurement  Innovations," 
Journal  of  Management  Information  Systems,  26,  257-296,  2009. 

47  Son,  Jai-Yeol,  and  Sung  S.  Kim.  "Internet  Users'  Information  Privacy-Protective  Responses:  A  Taxonomy  and  a 
Nomological  Model",  MIS  Quarterly,  32,  503-529,  2008. 

48  Ibid. 

49  Ibid. 
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Invitations  to  complete  a  23-question  online  survey  (Appendix  A)  were  sent  to  all  Air 
Force  Medical  Service  Corps  (MSC)  officers  specialty  matched  to  IT  or  serving  as  a  Chief 
Information  Officer  within  the  AFMS  and  eleven  responses  were  returned.  Overall,  R  squared 
regression  analysis  (Appendix  B)  showed  that  IT  security  and  cloud  privacy  concerns  are  holding 
back  the  speed  of  cloud  computing  adoption.  Free  flow  of  information  (moderate  .6,  strong  .76), 
flexibility  of  IT  infrastructure  (strong  .76,  .moderate  53),  and  system  quality  (strong. 79,  strong 
.84)  had  moderate/strong  positive  correlations  with  intention  to  use/user  satisfaction  respectively. 
IT  security  concerns  (-.008,  -.6)  and  cloud  privacy  concerns  (.09,  -.56)  had  negative  correlations 
to  intention  to  use/user  satisfaction  respectively.  Intention  to  use  (.44)  and  user  satisfaction  (0.6) 
measured  moderate  positive  correlations  with  net  benefits. 

Risk  Management  Framework  (RMF)  Obstacle  for  US  Software  Industry 

Based  on  the  data  from  the  preceding  quantitative  study,  cloud  privacy50  and  IT  security 
concerns51  are  the  most  significant  obstacles  for  DoD  cloud  computing  adoption.  The  above 
quantitative  data  shows  a  negative  correlation  between  privacy/security  concerns  and  cloud 
adoption.  The  DoD  needs  to  successfully  address  user  privacy  and  security  concerns  for  a 
successful  transition  to  the  cloud. 

The  DoD  emphasizes  cybersecurity  over  software  usability  and  cloud  migration.  Prior  to 
allowing  a  software  program  to  operate  on  its  network,  the  DoD  must  vet  it  through  an  intense 
IT  security  accreditation  process  known  as  the  RMF  which  was  formerly  known  as  the  DOD 
Information  Assurance  Certification  and  Accreditation  Process  (DIACAP)  referenced  in  figure 
6.  Cybersecurity  related  policies  and  issuances  are  numerous  and  always  changing,  which 
makes  the  overall  compliance  process  very  challenging  (DoD,  20 15). 52  Cybersecurity 

50  Son,  Jai-Yeol,  and  Sung  S.  Kim.  "Internet  Users'  Information  Privacy-Protective  Responses:  A  Taxonomy  and  a 
Nomological  Model",  MIS  Quarterly,  32,  503-529,  2008. 

51  Rai,  Arun,  Paul  Brown,  and  Xinlin  Tang.  "Organizational  Assimilation  of  Electronic  Procurement  Innovations," 
Journal  of  Management  Information  Systems,  26,  257-296,  2009. 

52  Department  of  Defense  Manual.  Guidebook  for  Integrating  the  Cybersecurity  Risk  Management  Framework  (RMF) 
into  the  System  Acquisition  Lifecycle,  Washington  D.C.  Office  of  the  Under  Secretary  of  Defense  for  Acquisition, 
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assessments  to  include  vulnerability  assessments,  intrusion  assessment,  cyber-security 


inspections,  and  adversarial  test  operations  are  integrated  into  the  entire  DoD  software 
deployment  lifecycle  which  includes  design,  testing,  evaluation,  and  maintenance.  These 
processes  are  reflected  in  the  Test  and  Evaluation  Master  Plan  (TEMP)  and  coordinated  with  the 
DoD  Test  Resource  Management  Center  (DoD,  20 15). 53  Currently  the  DoD  RMF  process  is 
much  more  stringent  than  any  information  assurance  program  in  the  private  and  other  public 
sectors.  However,  it  is  not  clear  whether  the  complex  system  regulating  is  truly  warranted. 
Currently,  RMF  is  regulated  by  over  200  policies  underwritten  by  over  17  offices  of  primary 
responsibility.  This  complexity  constitutes  a  large  challenge  for  any  software  vendor  that  would 
like  to  customize  its  already  existing  software  and  develop  future  applications  for  the  DoD  in  a 
timely  and  effectively  manner.  Streamlining  the  overall  process  would  lead  to  easier  and 
cheaper  cloud  computer  adoption. 


Technology,  and  Logistics,  2015. 

53  Department  of  Defense  Manual.  Cybersecurity  Test  and  Evaluation  Guidebook,  Washington  D.C.  Office  of  the 
Under  Secretary  of  Defense  for  Acquisition,  Technology,  and  Logistics,  2015. 
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Figure  6:  Complex  RMF  Cybersecurity  Related  Policy  and  Issuances 


Colonel  Richard  “Chip”  Terry,  the  AFMS  CIO,  mentioned  that  commercial  off-the-shelf 
private-sector  software  vendors  worry  about  incorporating  Air  Force  cybersecurity  standards 
after  their  products  have  already  been  developed.54  Applying  patches  and  other  safeguards  can 
often  involve  costly  product  re-engineering.  As  shown  in  figure  7  on  the  next  page,  the  software 
re-engineering  process  often  equals  and  sometimes  is  more  expensive  than  the  original 
development  cost  (Connor,  2017). 55  Most  vendors  start,  but  ultimately  abandon  RMF.  Clearly, 
the  cost  of  RMF  for  vendors  is  too  high.  Why  double  your  development  costs  for  the  chance  of 
selling  in  to  a  single  albeit  large  additional  customer  such  as  the  DoD? 


54  Terry,  Colonel  Richard  (HIT  Director,  Headquarters  Air  Force),  interview  by  author,  15  September  2016. 

55  Connor,  Ryan.  "Software  Re-Engineering,"  University  of  Limerick,"  2017,  https://ifs.host.cs.st- 
andrews.ac.uk/Resources/Notes/Evolution/SWReeng.pdf  (accessed  13  April  2017). 

23 


Forward  engineering 


Software  re-engineering 

Figure  7:  High  Cost  of  Software  Re-Engineering 

While  the  RMF  process  is  essential  in  protecting  the  Air  Force  network  from 
cyberattacks,  it  constitutes  a  labyrinth  for  software  vendors  developing  sophisticated  EHR  cloud 
applications.  Consequently,  the  Air  Force  invests  in  multi-billion  dollar  IT  custom 
software/training/support  acquisitions.  The  large  acquisitions  budget  cannibalizes  funds  for  the 
Air  Forces  medical  IT  operations  budget  reducing  overall  usability  and  productivity  among  its 
users. 

In  order  to  deliver  better  expeditionary  healthcare,  the  DoD  must  protect  its  network  while 
transitioning  to  the  cloud.  They  can  do  this  by  integrating  innovative  COTS  software.  The  Air 
Force  can  deploy  cheaper  and  more  sophisticated  software  if  it  relied  less  on  proprietary  systems 
and  more  on  COTS  software.  To  do  this,  money  should  be  taken  from  the  large  IT  acquisitions 
budget  to  grow  the  currently  small  IT  operations  and  maintenance  budget. 

Recommendation  1:  Grow  IT  Operating  Budget  and  Reduce  IT  Acquisitions  Budget 
To  operate  multiple  cutting  edge  cloud  based  COTS  EHR  applications  the  AFMS 
currently  needs  to  balance  out  its  operating  and  acquisitions  budgets  by  investing  more  on 
operations  and  less  on  big  ticket  IT  acquisitions  as  shown  in  figure  8.  Surprisingly,  the  Healthcare 
IT  budget  in  the  Air  Force  is  miniscule  resembling  that  of  a  medium  sized  company.  The 
healthcare  expeditionary  information  technology  budget  is  approximately  $2.5  million  per  year 
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for  sustainment.56  Additionally,  due  to  the  $20  trillion  national  debt  and  past  sequestrations,  the 
budget  will  remain  relatively  flat  in  the  foreseeable  future. 

Unlike  the  operating  budget,  the  healthcare  IT  (HIT)  acquisitions  budget  is  gargantuan. 
Over  the  past  twenty  years  the  AFMS  has  relied  on  custom  developed  multi-billion  dollar 
proprietary  software  platforms  such  as  the  Composite  Health  Care  System  (CHCS)  and  the 
Armed  Forces  Health  Longitudinal  Technology  Application  (AHLTA)  that  have  been  very 
expensive  to  field,  maintain,  and  train  users.  The  AFMS  is  set  to  spend  $1  IB  over  the  next  nine 
years  to  field  its  latest  iteration  of  the  new  EHR  system  called  Genesis  which  is  a  COTS 
developed  by  Cemer  Corporation  with  limited  modification.57 
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56  Orlando,  Lt  Col  Robert.  Operational  Medicine  IT  Update  Meeting.  29  March  2017. 

57  Allen,  Arthur.  "Critics  Warn  of  $11  billion  Pentagon  Health  Records  Fiasco,"  Politico,  2015, 
http://www.politico.com/story/2015/07/pentagon-electronic-health-record-critics-120730  (accessed  16  January 
2017). 


25 


Recommendation  2:  Simplify  AFMS  RMF 


The  DoD  can  leverage  more  expeditionary  healthcare  applications  while  developing  more 
nimble  and  modem  IT  services  by  simplifying  its  cybersecurity  RMF  within  its  system 
acquisition  lifecycle.  Streamlining  primary  responsibility  offices  while  reducing  redundant 
regulations  would  be  an  important  first  step  in  making  the  DoD  software  deployment  process 
faster,  easier,  safe,  and  more  modern.  Ultimately,  a  more  predictable  deployment  process  could 
lead  to  greater  interoperability  between  DoD  RFM  stakeholders  and  prospective  DoD  software 
suppliers  in  designing  and  testing  prototype  software  applications  jointly.  Additionally,  similarly 
to  what  the  DoD  will  do  with  the  MHS  Genesis  launch,  there  should  be  a  streamlined  process  for 
granting  joint  DoD  authority  to  operate  (ATO)  with  reciprocity  for  applications  among  all 
Services.58 

Great  progress  has  been  recently  made  in  RMF  simplification.  On  8  April  2017,  an  ATO 
was  granted  to  Amazon  Cloud  Services  enabling  it  through  bundling  to  operate  an  unlimited 
number  of  databases  and  applications  on  the  Air  Force  network.59  This  will  bring  down  the  cost 
of  developing  and  deploying  database  driven  applications  while  reducing  the  amount  of  time 
required  to  deploy  them. 

Recommendation  3:  Reach  Out  to  US  Software  Industry 

Through  a  consortium,  the  AFMS  could  influence  private  sector  software  developers  to 
incorporate  Air  Force/DoD  cybersecurity  standards  cheaply  at  product  development  inception. 
The  vendor’s  incentive  would  be  receiving  an  ATO  that  would  enable  them  to  compete  in  the 
$1B  DoD  Medical  IT  annual  market.60  The  AFMS  would  transition  towards  a  low-cost  medical 


58  Orlando,  Lt  Col  Robert.  Operational  Medicine  IT  Update  Meeting.  29  March  2017. 

59  Memorandum  for  Cloud  Service  Provider,  Defense  Information  Systems  Agency,  8  April  2017. 

60  Allen,  Arthur.  "Critics  Warn  of  $11  billion  Pentagon  Health  Records  Fiasco,"  Politico,  2015, 
http://www.politico.com/story/2015/07/pentagon-electronic-health-record-critics-120730  (accessed  16  January 
2017). 
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IT  ownership  model  like  its  private  sector  counterparts  rather  than  being  a  vertical  IT  integrator 


developing  large,  expensive  to  maintain,  and  custom  built  systems  based  on  obsolete 
technologies.  DoDI  5000.02  states,  “Cybersecurity  RMF  steps  and  activities  should  be  initiated 
as  early  as  possible  and  fully  integrated  into  the  DoD  acquisition  process,  including  requirements 
management,  system  engineering,  and  test  and  evaluation.61” 

The  recent  ATO  granted  to  Amazon  Cloud  Services62  will  allow  the  DoD  to  migrate  its 
existing  data  into  Amazon  databases  and  utilize  rapidly  deployable  intuitive  applications. 

Recommendation  4:  Deploy  COTS  Cloud  EHR  Expeditionary  Applications 

The  AFMS  must  continue  investing  in  updating  its  FT  offerings  to  enable  DoD-wide  cloud 
continuum  of  care  delivery  interaction  through  mobile  and  browser  based  apps.  This  will  allow 
medical  IT  services  to  move  beyond  the  costly  site-specific  architecture  of  the  LAN  client/server 
model  and  offer  access  to  medical  IT  wherever  there  is  a  Wi-Fi  connection  and  a  computing 
device  (desktop,  laptop,  tablet,  phone,  etc.). 

In  2015  the  DoD  launched  MiCare,  a  cloud  web  application  secure  messaging  solution, 
that  successfully  enabled  patients  to  communicate  with  their  provider  teams.63  Rather  than  setup 
an  appointment,  wait,  and  come  into  a  MTF,  patients  are  able  to  get  answers  to  medical 
questions  within  one  business  day  onlinbe.  The  application  is  very  popular  with  provider  teams 
who  can  take  care  of  their  patient  population  with  less  appointments.  Currently,  MiCare  is 
actively  used  by  over  50%  of  the  DoD’s  patient  population.64 

Tricare  Online  (TOL),  the  online  patient  portal  that  allows  patients  to  schedule 


61  DoD  Deputy  CIO  for  Cybersecurity.  Cybersecurity-Related  Policies  and  Issuances,  Washington  D.C.  Office  of  the 
Under  Secretary  of  Defense  for  Acquisition,  Technology,  and  Logistics,  2015. 

62  Memorandum  for  Cloud  Service  Provider,  Defense  Information  Systems  Agency,  8  April  2017. 

63  MiCARE  Provides  Faster  Care,  October  30,  2015,  http://www.af.mil/News/Article-Display/Article/626703/micare- 
provides-faster-care/  (accessed  13  April  2017). 

64  Donovan,  Maj  Edgardo.  "Spangdahlem  Air  Base  Access  to  Care  Update,"  23  May  2016. 
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appointments  with  their  providers  and  to  view  their  EHR,  has  not  been  as  successful  as  MiCare. 
In  the  Air  Force,  TOL  is  actively  used  by  only  6%  of  the  patient  population.65  The  low 
utilization  has  been  attributed  to  a  very  difficult  registration  process  for  non-active-duty  patients 
as  well  as  the  system’s  inability  to  successfully  integrate  the  totality  of  electronic  health  data 
from  CHCS  and  AHLTA. 

In  2017  the  DoD  started  testing  MHS  Genesis,  the  electronic  health  record  system 
designed  to  replace  AHLTA  and  CHCS.  Unfortunately,  MHS  Genesis  is  not  a  cloud  EHR 
system.  The  system  will  operate  under  an  expensive  client/server  model  using  obsolete 
technology.  It  will  have  authority  to  operate  on  all  DoD  networks.  It  will  have  an  instant 
messaging  feature  that  will  replace  MiCare  and  a  patient  electronic  health  record  portal  that  will 
replace  TOL.66 

In  the  absence  of  a  true  cloud  solution  and  to  improve  access  to  patient  data  in  the  short¬ 
term,  it  is  imperative  that  the  DoD  deploy  a  MHS  Genesis  healthcare  provider  web  portal 
accessible  through  smart  portable  devices.  This  will  provide  POI  combat  medics  access  to  MHS 
Genesis  through  smartphones  or  tablets.  It  will  also  enhance  EHR  functionality  in  austere 
environments  so  patients  are  tracked  electronically  in  real-time  as  they  move  throughout  the 
continuum  of  care.  For  example,  in  the  midst  of  catastrophic  events,  many  healthcare  providers 
can  provide  vital  patient  care  and  maintain  essential  communication  by  accessing  the  EHR 
through  a  smartphone  or  tablet.  If  forced  to  evacuate  from  a  hostile  area,  physicians  could  still 
use  the  EHR  for  writing  and  transmitting  prescriptions,  checking  patient  medication  lists,  and 
consulting  with  the  patient  about  all  their  medical  conditions. 

Great  progress  has  been  recently  made  in  increasing  the  capabilities  needed  to  deploy 


65  Ibid,  37 

66  Orlando,  Lt  Col  Robert.  Operational  Medicine  IT  Update  Meeting.  29  March  2017. 
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COTS  cloud  EHR  expeditionary  applications.  The  DoD  can  leverage  the  databases  and 
applications  already  created  by  Amazon  to  deliver  advanced  EHR  applications.  Amazon  Cloud 
Services  are  not  just  a  product  or  a  service,  but  a  development  platform  as  well.  For  a  yearly 
subscription  fee  customers  have  the  ability  to  develop  and  deploy  their  own  custom  made 
applications.  The  DoD  has  an  immense  pool  of  IT  talent  that  it  could  leverage  to  develop  next 
generation  applications  at  no  additional  cost.  There  are  many  AFMS  medical  professionals  who 
are  passionate  about  technology.  Some  have  taught  themselves  how  to  program  and  to  develop 
databases.  In  recent  years,  many  doctors  have  become  demoralized  at  the  perceived  inferior  state 
of  DoD  medical  IT  when  compared  to  what  is  available  in  the  private  sector.  Leveraging 
Amazon  Cloud  services  could  inspire  an  unprecedented  wave  of  excitement  about  medical  IT 
innovation  along  with  higher  morale  and  better  retention  in  the  years  to  come. 

Recommendation  5:  Grow  Telemedicine 

Once  a  successful  transition  to  the  cloud  is  complete,  the  DoD  can  significantly  lower 
costs  while  expanding  access  to  quality  healthcare  both  in-garrison  and  in  expeditionary 
environments  by  leveraging  telehealth.  Telehealth  in  radiology  and  mental  health  has  been 
successfully  implemented  for  many  years.  The  DoD  should  expand  its  tele-radiology  capability 
into  the  cloud  utilizing  COTS  software  similar  to  what  is  developed  by  ImageZone.  Furthermore, 
primary  and  specialty  care  telehealth  is  progressing  between  DoD  clinics  and  hospitals.  Figure 
nine  on  page  30  is  a  recent  example.  In  2016,  the  Department  of  Defense’s  first  Joint  Service 
Telehealth  Program  was  implemented  bringing  30  specialty  capabilities  from  Landstuhl 
Regional  Medical  Center  (Army)  to  the  52  Medical  Group  clinic  at  Spangdahlem  Air  Base  (Air 
Force).67  U.S.  Army  Col.  Kirk  Waibel,  telehealth  medical  director  at  Landstuhl,  explained  that 
the  excitement  is  not  just  about  a  piece  of  technology,  but  how  the  provider  is  helping  their 

67  Frank,  Rusty.  "Inaugural  Interservice  Telehealth  Partnership  Launches  at  Spangdahlem,"  2016, 

http://www. spangdahlem. af.mil/news/story. asp?id=123471719  (accessed  4  April  2016). 
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patients.  Waibel  added  that  the  program  has  already  saved  soldiers,  beneficiaries  and 
commanders  an  estimated  2,050  work  or  school  days,  $1.34  million  in  travel-related  expenses 
and  reduced  825,000  kilometers  in  vehicle  travel  between  local  clinics  and  Landstuhl.  U.S.  Air 
Force  Col.  Joe  McFall,  52nd  FW  commander  said,  “There  are  two  things  that  are  awesome  about 
the  project:  the  tangible  and  the  intangible.  The  tangible  piece  is  how  we  talk  about  innovation: 
doing  it  faster,  better  and  cheaper,  which  this  allows  us  to  do  all  of  those  things.  The  intangible 
piece  is  there,  too,  which  is  how  this  allows  making  our  Airmen,  our  families  and  our  community 
better  (Frank,  2016). ”68 


Figure  9:  Nurse  Performs  Telehealth  Exam  with  Offsite  Surgical  Physician  Assistant  Watching  on  Screen 


68  Frank,  Rusty.  "Inaugural  Interservice  Telehealth  Partnership  Launches  at  Spangdahlem,"  2016, 
http://www.spangdahlem. af.mil/news/story. asp?id=123471719  (accessed  4  April  2016). 
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Conclusion 


Over  the  next  ten  years  the  AFMS  has  an  incredible  opportunity  to  lower  costs  and 
increase  the  quality  of  its  expeditionary  medical  information  technology  services  by  removing 
integration  barriers  while  successfully  addressing  security  and  privacy  concerns  as  it  migrates  to 
the  cloud.  In  doing  so,  the  AFMS  will  not  only  remain  an  HRO  but  also  deliver  the  world’s  first 
globally  integrated  cloud  based  expeditionary  healthcare  system.  To  be  successful,  the  AFMS 
must  reach  out  to  private  sector  medical  software  developers,  motivate  them  to  sell  into  its  $2B 
per  year  medical  software  market,  integrate  simplified  cybersecurity  standards  into  all  stages  of 
off-the-shelf  cloud  applications  design,  and  deploy  next  generation  telehealth  services. 
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Appendix  A:  Survey  Results 


Strongly  Agree  (1)  -  Agree  (2)  -  Undecided  (3)  -  Disagree  (4)  -  Strongly  disagree  (5) 


The  cloud  makes  it  easier  to  share  information  with  other  users.  '  responses! 


Communication  among  team  members  is  more  open  thanks  to  the  cloud. 

(1 1  responses) 


8 

6 
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0(0%) 


2(18.2%) 
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Access  to  information  from  team  members  was  quicker  and  easier  through 
the  cloud. 

(11  responses) 


The  cloud  delivered  timely  useful  team  member  information  through 
automated  synchronized  updates. 

(11  responses) 


The  cloud  enables  more  honest  and  more  open  communication  among  team 
members. 

(11  responses) 


Our  organization  has  established  rules  and  standards  for  our  cloud  system 
compatible  with  our  internal  IT  system. 

(11  responses) 


4  (36.4%) 


4  (36.4%) 


1  2  3  4  5 
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The  cloud  allows  information  to  be  readily  accessible  to  me.  "  responses. 


Our  organization  has  identified  and  standardized  data  to  be  shared  across 
sections/departments  through  the  cloud. 

(11  responses) 


6  (54.5%) 


Members  of  our  organization  can  access  all  organizational  data  through  the  The  c|oud  makes  information  very  accessible,  (ii  responses) 

cloud.  ’ 

(11  responses) 


6  (54.5%) 


The  cloud  makes  it  easier  to  share  information  with  other  users,  n  responses. 


I  am  concerned  with  the  information  security  and  privacy  safeguards  that 
cloud  systems  provide. 

(11  responses) 


4  (36  4%) 


1  2  3  4  5 


The  cloud  makes  information  easy  to  access.  ;n  responses) 


I  am  concerned  that  legal  structures  cannot  adequately  protect  me  from 
problems  regarding  cloud  systems. 

(1 1  responses) 


4(36  4%) 
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I  am  concerned  that  technological  structures  do  not  adequately  protect  me 
from  problems  regarding  cloud  systems. 

(11  responses) 


In  general,  cloud  systems  do  not  provide  a  safe  environment  in  which  to 
share  information. 

(11  responses) 


1  2  3  4  5 


I  am  concerned  that  encryption  and  other  technological  advances  of  cloud 
systems  do  not  make  it  safe  for  me  to  share  information  on  the  cloud. 

(1 1  responses) 

6 


5  (45.5%) 


I  am  concerned  that  the  information  I  share  on  the  cloud  could  be  misused 

(11  responses) 


8 


1  2  3  4  5 


I  am  concerned  that  my  private  information  on  the  cloud  could  be 
compromised. 

(11  responses) 


6  (54.5%) 


1  2  3  4  5 


I  am  concerned  about  providing  personal  information  to  through  the  cloud, 
because  of  what  hackers  might  do  with  it. 

(11  responses) 


1  2  3  4  5 


I  am  concerned  about  sharing  personal  information  through  the  cloud 
because  it  could  be  used  in  a  way  I  did  not  foresee. 

(1 1  responses) 

6 


5  (45  5%) 


1  2  3  4  5 


I  intend  to  continue  using  the  cloud  in  the  future,  n  responses 

6 


5  (45.5%) 


1  2  3  4  5 
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I  will  always  try  to  use  the  cloud  in  my  daily  life.  '  ■  responses) 


I  will  always  try  to  use  the  cloud  in  my  daily  life.  11  responses) 


I  plan  to  continue  to  use  the  cloud  frequently,  n  responses) 


I  plan  to  continue  to  use  the  cloud  frequently,  n  responses) 


Overall,  I  am  satisfied  using  the  cloud.  1  responses) 


The  cloud  helps  me  do  more.  <n  responses) 


The  cloud  saves  me  time,  n  responses) 


4  (36.4%) 


The  use  of  the  cloud  has  saved  people  time  and  money.  <11  responses) 


4  (36.4%) 
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The  benefits  of  greater  free  flow  of  information,  flexibility  of  IT  infrastructure, 
and  system  quality  have  yielded  positive  net  benefits  for  organizations. 

(11  responses) 

6 

5  (45.5%) 


1  2  3  4  5 


Information  sharing  through  the  use  of  cloud  computing  has  reduced  poverty. 

(11  responses) 


5  (45  5%) 


1  2  3  4  5 


Countries’  use  of  cloud  computing  has  yielded  a  net  positive  growth  in  gross 
national  products. 

(11  responses) 
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Appendix  B:  Survey  Results  Analysis 


IT  Security  Concerns,  Intention  to  Use 
Negative  Correlation  (-.008): 


function 

value 

mean  of  x 

3.232727273 

mean  of  y 

3.64 

correlation  coefficient  r 

-0.008889382 

A 

3.657587602 

B 

-0.005440484 

0.91 .31 .72.1  2.52.93.33.74  1  4  54  9 
—  A+Bx  X 


IT  Security  Concerns,  User  Satisfaction 
Negative  Correlation  (-.6): 


function 

value 

mean  of  x 

3  232727273 

mean  of  y 

3.909818182 

correlation  coefficient  r 

-0.625327116 

A 

5.53401145 

B 

-0.50242199 

—  A+Bx  x 


Cloud  Privacy  Concerns,  Intention  to  Use 
No  Correlation  (.09): 


Cloud  Privacy  Concerns,  User  Satisfaction 
Negative  Correlation  (-.56): 


function 

value 

mean  of  x 

3.2 

mean  of  y 

3.64 

correlation  coefficient  r 

0.093024348 

A 

3.486549708 

B 

0.047953216 

function 

value 

mean  of  x 

3.2 

mean  of  y 

3.909818182 

correlation  coefficient  r 

-0  564806163 

A 

5.13292929 

B 

-0.382222222 
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